1. When bus off is detected, CAN FD controller will set CCR.INIT to 1. Stopping all bus activities. 2. In order to recovery the bus off, Bus off recovery sequence needs to be performed. It is done by clearing the CCR.INIT (i.e. CCR.INIT written to 0), which starts the timer for waiting 129 occurrences of Bus Idle (129 x 11 consecutive recessive bits) before resuming normal operation. 3. At the end of the Bus off recovery sequence (confirmed by reading CCR.INIT equal to 0), the Receive and Transmit Error Counters will be reset.
Could you let us know if you are using the Sample driver library?